$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb99f3e5-f579-3c82-8919-87da1e5ea9c9.roa File: fb99f3e5-f579-3c82-8919-87da1e5ea9c9.roa (raw, json) Hash identifier: nw4l0P45zGuMlKcmNj3JMvLsgQrUIl4Gu3EY8sDHrYM= Subject key identifier: 17:57:FD:CD:2B:67:F0:7B:2E:7D:4A:3A:72:DF:3B:FC:43:1E:DD:51 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A88DB376AAAE39E172680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb99f3e5-f579-3c82-8919-87da1e5ea9c9.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.70.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:88:db:37:6a:aa:e3:9e:17:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=8959b871-2672-4dc3-874b-a54694306618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:fa:7e:19:50:82:29:26:bb:41:e7:e0:e8: b1:76:1e:13:f8:fd:3a:df:15:45:49:76:25:c9:60: e9:9b:8b:3a:7b:10:bd:c0:9f:12:35:d5:44:88:d5: b9:02:2b:6c:90:38:bb:71:32:c2:2f:0c:e5:1b:37: 0e:d6:97:5e:20:2e:c5:f1:ed:d9:2f:11:25:88:d1: 39:80:27:eb:27:32:a5:66:89:22:30:9e:27:55:6c: 29:51:1a:96:67:8c:cf:3f:cb:86:08:60:46:2c:b1: 91:0f:3b:6f:59:71:cd:38:00:46:2e:b4:6d:4b:f0: c0:e0:54:ef:06:34:7b:bd:ad:cf:a5:15:41:f8:f6: 7c:45:f4:ab:94:dd:b2:a4:f5:59:f1:f9:51:bb:21: 52:c7:fb:3d:09:3e:83:59:56:77:3d:f2:1b:f1:a4: 22:c6:84:16:e8:2a:03:bd:50:cc:5e:82:59:2c:bf: 1b:eb:87:d5:2a:e3:c0:91:d6:98:8b:a3:88:53:c1: fe:b5:56:37:05:a7:06:d2:45:ee:71:59:f0:3b:cb: ba:15:09:bf:1e:59:8e:9c:6a:fb:8d:8b:2b:bf:21: d6:8c:95:d3:39:3f:7b:5d:7d:9b:fc:ac:1e:dc:e0: e4:b8:24:c1:e9:9a:6b:3d:0d:fb:b2:be:7c:e9:d5: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:57:FD:CD:2B:67:F0:7B:2E:7D:4A:3A:72:DF:3B:FC:43:1E:DD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb99f3e5-f579-3c82-8919-87da1e5ea9c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f4:9b:c9:39:99:83:d4:ee:36:70:eb:20:6a:ae:da:29:7b: 84:47:13:44:55:72:3b:0b:68:41:14:6a:42:95:fd:66:d6:ac: 2a:db:8d:af:5d:e5:2a:65:46:3a:46:8e:18:f3:5b:fa:77:d3: d8:2c:ea:1b:8c:33:b0:cf:1b:47:45:36:25:9c:69:ac:36:05: 5d:88:98:e9:3e:18:75:d1:2d:18:f5:f7:3a:d6:cf:c2:db:df: 57:cd:a3:79:77:58:e6:de:af:a0:e9:1e:80:0b:05:f7:77:42: 8f:f7:2f:38:0d:3c:98:55:d5:74:9a:76:60:e5:02:7d:f0:ef: d6:a4:be:14:b1:c5:ec:36:e7:f2:25:81:36:fa:fc:54:61:29: f9:61:2c:10:69:41:6f:fc:f8:f9:3e:72:9c:87:37:cf:41:1b: 35:12:e1:28:80:f4:b7:cc:4c:de:0a:65:e0:c4:d4:36:8a:61: 91:a2:a2:02:90:cb:7c:6d:e3:c6:cf:ad:a8:d9:04:a0:11:3b: cc:91:0c:6b:4b:fb:70:a9:ba:87:30:b3:20:0a:a1:70:0f:63: 0c:c3:ef:12:26:d1:37:18:67:08:f4:53:74:64:71:10:f1:9f: 1d:84:71:b6:db:05:d3:ca:72:d5:24:47:95:b3:0a:38:41:cc: a2:be:44:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGojbN2qq454XJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk ODk1OWI4NzEtMjY3Mi00ZGMzLTg3NGItYTU0Njk0MzA2NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2f6fhlQgikmu0Hn4Oixdh4T+P063xVFSXYl yWDpm4s6exC9wJ8SNdVEiNW5AitskDi7cTLCLwzlGzcO1pdeIC7F8e3ZLxEliNE5 gCfrJzKlZokiMJ4nVWwpURqWZ4zPP8uGCGBGLLGRDztvWXHNOABGLrRtS/DA4FTv BjR7va3PpRVB+PZ8RfSrlN2ypPVZ8flRuyFSx/s9CT6DWVZ3PfIb8aQixoQW6CoD vVDMXoJZLL8b64fVKuPAkdaYi6OIU8H+tVY3BacG0kXucVnwO8u6FQm/HlmOnGr7 jYsrvyHWjJXTOT97XX2b/Kwe3ODkuCTB6ZprPQ37sr586dUohQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdX/c0rZ/B7Ln1KOnLfO/xDHt1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmI5OWYzZTUtZjU3OS0z YzgyLTg5MTktODdkYTFlNWVhOWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJb0m8k5mYPU7jZw6yBqrtope4RHE0RVcjsLaEEUakKV/WbWrCrbja9d 5SplRjpGjhjzW/p309gs6huMM7DPG0dFNiWcaaw2BV2ImOk+GHXRLRj19zrWz8Lb 31fNo3l3WOber6DpHoALBfd3Qo/3LzgNPJhV1XSadmDlAn3w79akvhSxxew25/Il gTb6/FRhKflhLBBpQW/8+Pk+cpyHN89BGzUS4SiA9LfMTN4KZeDE1DaKYZGiogKQ y3xt48bPrajZBKARO8yRDGtL+3CpuocwsyAKoXAPYwzD7xIm0TcYZwj0U3RkcRDx nx2EcbbbBdPKctUkR5WzCjhBzKK+RNk= -----END CERTIFICATE-----Generated at Sat Jun 7 17:23:44 2025 by rpki-client